ntp up to 4.2.8p13/4.3.99 ntpd Timestamp authentication spoofing

Summaryinfo

A vulnerability classified as problematic has been found in ntp up to 4.2.8p13/4.3.99. This issue affects some unknown processing of the component ntpd. This manipulation as part of Timestamp causes authentication spoofing. This vulnerability is tracked as CVE-2020-13817. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability has been found in ntp up to 4.2.8p13/4.3.99 (Network Management Software) and classified as problematic. Affected by this vulnerability is some unknown processing of the component ntpd. The manipulation as part of a Timestamp leads to a authentication spoofing vulnerability. The CWE definition for the vulnerability is CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. As an impact it is known to affect availability. The summary by CVE is:

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.

The weakness was disclosed 06/04/2020. This vulnerability is known as CVE-2020-13817 since 06/04/2020. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 4.2.8p14 or 4.3.100 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Network Management Software

Name

• ntp

Version

• 4.2.8p13
• 4.3.0
• 4.3.1
• 4.3.2
• 4.3.3
• 4.3.4
• 4.3.5
• 4.3.6
• 4.3.7
• 4.3.8
• 4.3.9
• 4.3.10
• 4.3.11
• 4.3.12
• 4.3.13
• 4.3.14
• 4.3.15
• 4.3.16
• 4.3.17
• 4.3.18
• 4.3.19
• 4.3.20
• 4.3.21
• 4.3.22
• 4.3.23
• 4.3.24
• 4.3.25
• 4.3.26
• 4.3.27
• 4.3.28
• 4.3.29
• 4.3.30
• 4.3.31
• 4.3.32
• 4.3.33
• 4.3.34
• 4.3.35
• 4.3.36
• 4.3.37
• 4.3.38
• 4.3.39
• 4.3.40
• 4.3.41
• 4.3.42
• 4.3.43
• 4.3.44
• 4.3.45
• 4.3.46
• 4.3.47
• 4.3.48
• 4.3.49
• 4.3.50
• 4.3.51
• 4.3.52
• 4.3.53
• 4.3.54
• 4.3.55
• 4.3.56
• 4.3.57
• 4.3.58
• 4.3.59
• 4.3.60
• 4.3.61
• 4.3.62
• 4.3.63
• 4.3.64
• 4.3.65
• 4.3.66
• 4.3.67
• 4.3.68
• 4.3.69
• 4.3.70
• 4.3.71
• 4.3.72
• 4.3.73
• 4.3.74
• 4.3.75
• 4.3.76
• 4.3.77
• 4.3.78
• 4.3.79
• 4.3.80
• 4.3.81
• 4.3.82
• 4.3.83
• 4.3.84
• 4.3.85
• 4.3.86
• 4.3.87
• 4.3.88
• 4.3.89
• 4.3.90
• 4.3.91
• 4.3.92
• 4.3.93
• 4.3.94
• 4.3.95
• 4.3.96
• 4.3.97
• 4.3.98
• 4.3.99

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion